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REMARKS/ARGUMENTS 

The present application discloses a document repository system in which 
the originator of the document is able to ensure the integrity and security of its 
document filed with a third party repository without having to trust the 
administrator of that repository. In this repository system, the document 
originator and the repository administrator have vault environments which are 
secure extensions of their respective work spaces. The vault of the document 
originator encrypts a document that it receives from the originator, prior to 
forwarding it on to the vault of the repository to maintain the document secure 
from the repository administrator. When a request is made to view the 
document, it is made from the vault which is a secure extension of the 
requesting party's work space to the repository's vault. The repository's vault 
retrieves a copy of the encrypted document which is forwards, along with the 
requester's identity, to the originator's vault. The originator's vault verifies that 
the requester is authorized to view the document from the access control list 
using an access control list identifying access ownership privileges for the 
document stored in the vault itself. The originator's vault decrypts the 
document and forwards the decrypted document directly to the requester's 
vault. Therefore the repository administrator never handles the decrypted 
documents or the encrypting and decrypting of the documents. 

The repository system also maintains the information on authorized user 
access secure from any actions of the third party administrator of the 
repository. To this end, the system includes a communications environment 
that houses a first agent program in the data repository system which is a 
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secure extension of the work space of the depositor's computer and a second 
agent program which is a secure extension of the work space of a first user 
computer with access privileges to the electronic data file. A manifest is 
accessible to and maintained by the first agent program. The first user 
computer has a record of its access privileges to the electronic data file which 
is accessible to and maintained by the second agent program. When changes 
are made to the manifest affecting the first user computer's access privileges to 
the electronic data file, these changes are communicated from the first agent 
program to the second agent program so that the first user computer's record of 
its access privileges can be updated. The first agent program is also able to 
verify the first user computer's access privileges to the electronic data file 
before the electronic data file is released to the second agent program. 

Claim Rejections Under 35 USC 102 

A. Original claims 1 to 6, 12, 13, 22 and 23, in the application were all 
rejected under 35 USC 102(e) as being anticipated by the Carroll, U.S. patent, 
#6,105,131. 



The applicant's attorney did not find where the Carrroll patent discloses 
preventing access by the repository administrator to either the vault owners 
vault or a directory of authorized users of data stored in the repository. In fact 
from lines 60 to 65 of column 5 of Carroll, it would appear that a repository 
administrator would have access to the vault space and from the Abstract of 
Carroll, the administration would have access to the vault directory. 
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B. Original claims 7, 8, 14 to 18, 25 and 26 were rejected under 35 USC 
102(e) as being anticipated by Chiu, U.S. Patent #6,181,336. 

Applicant's attorney did not find where the Chiu patent teaches 
preventing access by the system administrator to a vault owners vault. In fact, 
it appears from lines 17 to 24 of column 24, that the system administrator can 
control who has access to a users vault. Therefore in Chiu, the administrator 
has access through the control list to the users vault. 

Rejections Under 35 USC 103 

Original claims 9 to 1 1, 19 and 21 where rejected under 35 USC 103(a) 
as being unpatentable over Chiu in view of Carroll. 

Since neither the Chiu or Carroll patents excludes access to the vaults of 
the data signals or users or prevents access to the access list, the combination 
of these two patents does not. 

For the above reasons all claims in the application are allowable over the 
cited references. Independent claims 1, 7, 12 and 17 all call for maintaining 
portions of a data repository where data is secure from the repository 
administrator. 
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Changes to the Specification 



A number of corrections have been made to the specification. For 
instance, the application # of the copending application has been added to page 
1 . The referral to "Figure 4" on page 12, has been changed to - Figures 4A 
and 4B ~ which are contained in the drawing. Also, grammar of the paragraph 
beginning on page 5, line 29, and other paragraphs, has been corrected. 

For the above reasons, it is respectfully submitted that the claims are 
allowable over the prior art and the application is in condition for allowance. 
Therefore, it is requested that the application be reconsidered, allowed and 
passed to issue. 



Respectfully submitted, 



James E. Murray - Attorney 

Reg. No.: 20,915 

Telephone No.: (845) 462-4763 
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A number of conections have been made to the specification. For 

instance, the application* of thecoDendihftannl«v-»^„h- ^ , 

«_ vupemung application has been added to page 

beginning enj*^ 29^6tfier ,,an^^, been conected. 



are 



F» the above ,t8soi^ 
aUoi^fe w t^P^ coiriition & allowance; 

passed to issue. 



Respectfully submitted* 




. 

Jafne^E. Muncay^- Attorney 
Reg. No;: 20,915 

TetephoaeN<L;X845) 462^4763 
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